{"id":81560,"date":"2020-05-14T19:42:19","date_gmt":"2020-05-14T17:42:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd"},"modified":"2020-05-14T19:42:19","modified_gmt":"2020-05-14T17:42:19","slug":"udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd","title":{"rendered":"Vulnerabilit\u0103\u021bile exploatate de la distan\u021b\u0103 \u00een FreeBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00cen FreeBSD <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/thread.html\">remediat<\/a><\/noindex> cinci vulnerabilit\u0103\u021bi, dintre care unele pot duce la scrierea datelor la nivel de nucleu prin trimiterea unor pachete de re\u021bea specificate sau permit unui utilizator local s\u0103 \u00ee\u0219i creasc\u0103 privilegiile. Vulnerabilit\u0103\u021bile au fost corectate \u00een actualiz\u0103rile 12.1-RELEASE-p5 \u0219i 11.3-RELEASE-p9. <\/p>\n<p>Cea mai periculoas\u0103 vulnerabilitate (<noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/001950.html\">CVE-2020-7454<\/a><\/noindex>) este cauzat\u0103 de lipsa unei verific\u0103ri adecvate a dimensiunii pachetului \u00een biblioteca libalias la analiza antetelor specifice protocoalelor. Biblioteca libalias este utilizat\u0103 \u00een filtrul de pachete ipfw pentru translatarea adreselor \u0219i include func\u021bii tipice de \u00eenlocuire a adreselor \u00een pachetele IP \u0219i analiza protocoalelor. Vulnerabilitatea permite prin trimiterea unui pachet de re\u021bea special conceput, citirea sau scrierea datelor \u00een zona de memorie a nucleului (atunci c\u00e2nd se folose\u0219te o implementare NAT \u00een nucleu) sau a procesului<br \/>\nnatd (\u00een cazul utiliz\u0103rii unei implement\u0103ri NAT \u00een spa\u021biul utilizatorului). Problema nu afecteaz\u0103 configura\u021biile NAT construite folosind filtre de pachete pf \u0219i ipf, precum \u0219i configura\u021biile ipfw \u00een care nu se folose\u0219te NAT. <\/p>\n<p>Alte vulnerabilit\u0103\u021bi:<\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/001951.html\">CVE-2020-7455<\/a><\/noindex> \u2014 \u00eenc\u0103 o vulnerabilitate exploatabil\u0103 de la distan\u021b\u0103 \u00een libalias, legat\u0103 de calcularea incorect\u0103 a lungimii pachetelor \u00een handlerul FTP. Problema se limiteaz\u0103 la scurgerea con\u021binutului de c\u00e2teva octe\u021bi de date din zona de memorie a nucleului sau a procesului natd.\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/001953.html\">CVE-2019-15879<\/a><\/noindex> \u2014 o vulnerabilitate \u00een modulul cryptodev, cauzat\u0103 de accesarea unei zone de memorie deja eliberate (use-after-free), care permite unui proces neprivilegiat s\u0103 scrie \u00een zone ale memoriei nucleului. Ca o solu\u021bie pentru blocarea vulnerabilit\u0103\u021bii, se recomand\u0103 desc\u0103rcarea modulului cryptodev folosind comanda \u201ekldunload cryptodev\u201d, dac\u0103 acesta a fost \u00eenc\u0103rcat (\u00een mod implicit, cryptodev nu este \u00eenc\u0103rcat). Modulul cryptodev ofer\u0103 aplica\u021biilor din spa\u021biul utilizatorului acces la interfa\u021ba \/dev\/crypto pentru a apela la mecanismele de accelerare hardware a opera\u021biunilor criptografice (\u00een AES-NI \u0219i OpenSSL \/dev\/crypto nu este utilizat).\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/001954.html\">CVE-2019-15880<\/a><\/noindex> \u2014 a doua vulnerabilitate \u00een cryptodev, care permite unui utilizator neprivilegiat s\u0103 ini\u021bieze o criz\u0103 a nucleului prin trimiterea unei cereri de executare a unei opera\u021biuni criptografice cu un MAC incorect. Problema este cauzat\u0103 de absen\u021ba verific\u0103rii dimensiunii cheii MAC la alocarea bufferului pentru stocarea acesteia (bufferul era creat pe baza datelor despre dimensiune furnizate de utilizator, f\u0103r\u0103 verificarea dimensiunii efective).\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.freebsd.org\/pipermail\/freebsd-announce\/2020-May\/001952.html\">CVE-2019-15878<\/a><\/noindex> \u2014 o vulnerabilitate \u00een implementarea protocolului SCTP (Stream Control Transmission Protocol), cauzat\u0103 de verificarea incorect\u0103 a cheii partajate, utilizat\u0103 de extensia SCTP-AUTH pentru autentificarea secven\u021belor SCTP. O aplica\u021bie local\u0103 poate actualiza cheia prin Socket API, \u00eentrerup\u00e2nd simultan conexiunea SCTP, ceea ce va conduce la accesarea unei zone de memorie deja eliberate (use-after-free).\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52948\">opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u044f\u0434\u0440\u0430 \u043f\u0440\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438\u043b\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 12.1-RELEASE-p5 \u0438 11.3-RELEASE-p9. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7454) \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u043f\u0430\u043a\u0435\u0442\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libalias \u043f\u0440\u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-81560","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-14T17:42:19+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-14T17:42:19+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u0103\u021bi exploatabile de la distan\u021b\u0103 \u00een FreeBSD | ProHoster","description":"\u00cen FreeBSD au fost remediate cinci vulnerabilit\u0103\u021bi, printre care exist\u0103 probleme care pot fi poten\u021biale.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e FreeBSD | ProHoster","og:description":"\u0412\u043e FreeBSD \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-vo-freebsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-14T17:42:19+00:00","article:modified_time":"2020-05-14T17:42:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"81560","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:56:23","updated":"2022-10-01 22:00:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/81560","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=81560"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/81560\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=81560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=81560"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=81560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}